SSL Man-in-the-Middle Attacks avec authentification mutuelle (Closed)

4 month(s) ago

Bonjour,
Je cherche de l'information si il est possible de faire une attaque de type SSL Man-in-the-Middle en mode authentification mutuelle?
En d'autre termes si l'on configure le serveur Web pour qu'il demande une authentification SSL client (Browser ou application Java avec un JRE) via un certificat X509 sur le poste client. Certificat Software ou sur un Token Cryptographique.
D'après moi, je pense que non. Mais peut être je me trompe !

Closed
This question is closed as the author got an answer from the community.

3 Answer(s)

		You must be logged-in to view our member's answers. Clic here to log-in or create an account if you have been invited to join SecurityVibes !
		30 November 2009 (12:16)

		You must be logged-in to view our member's answers. Clic here to log-in or create an account if you have been invited to join SecurityVibes !
		30 November 2009 (12:40)

		You must be logged-in to view our member's answers. Clic here to log-in or create an account if you have been invited to join SecurityVibes !
		1 December 2009 (00:59)